In this document we provide supplementary materials that we are not able to fit into the main manuscriptduetothepagelimit. The dimensions of the hidden features of the three-layer GCN are set toF, F/2, and F respectively. The dataset is separated into ten parts. We generate ten validation accuracy curves when setting each of parts as the validation one. The ten curves are then averaged.

In the first case, points arrive sequentially, and only a summary can be stored in memory.

Neural Information Processing Systems http://nips.cc/

Neural Information Processing Systems http://nips.cc/

We investigate algorithmic principles that enable efficient data deletion in ML.

We present a case study on malware detection--a binary classification problem on byte sequences where classifier evasion is a well-established threat model.